08edb5dc58
Update index.php
13 years ago
360c22fd28
Validate cookie to prevent auth bypasses.
13 years ago
5e7086adc9
Move login handling to OC class
13 years ago
1823dafe44
Remove checks before displaying login page
...
At that point the checks are already done before
13 years ago
667cd318fe
Use OC_Util::displayLoginPage and cleanup the function
13 years ago
3387454094
Move login code from index.php to OC class
13 years ago
9156fb73fd
Move handling request of index.php to OC class
13 years ago
902c649dad
use new sanitize HTML function backported
...
Conflicts:
lib/template.php
13 years ago
089ae980c4
use new sanitize HTML function
13 years ago
79f9d61ec8
Allow apps to load before login, needed for user_openid
13 years ago
0074062b53
fixed xss vulnerability
13 years ago
3ddaedee3b
fixed xss vulnerability
13 years ago
f589df7366
Redirect HTTP Auth requests to REQUEST_URI. Partial fix for http://bugs.owncloud.org/thebuggenie/owncloud/issues/oc-874
13 years ago
2b22c538c8
Make some apps compatible
13 years ago
4f6978c30f
Redirect HTTP Auth requests to REQUEST_URI. Partial fix for http://bugs.owncloud.org/thebuggenie/owncloud/issues/oc-874
13 years ago
ba1dec64c1
load all apps when loging in, needed for apps listening to login hooks
13 years ago
ec55eaef5b
dont load apps when displaying the login page
...
and only load authentication apps during login
13 years ago
a945fa10a6
update copyright
13 years ago
90cbc32c77
Fix redirect after login, prevent open redirects
13 years ago
1a874b4c56
make redirect safe by restricting it to current host
13 years ago
9b5e8a2c63
fix redirect to desired page after login
13 years ago
b35c6b57a9
allow loading of css files even if a user isn't logged in
13 years ago
232788396d
some changes for login
13 years ago
051442bc76
Sanitize redirect urls
13 years ago
4dbc2093c6
Create a function for linking to remote.php
13 years ago
e33b12a375
fix path of webdav
13 years ago
d2b0de614e
fix an XSS bug
13 years ago
da03d05700
create folder 'remote' for the remote services like caldav, carddav and webdav
13 years ago
657d02371c
fix login
13 years ago
74b5e22a68
some more csrf fixes
13 years ago
3f64eb25ab
some fixes fore movable apps
13 years ago
2e85313701
optimize code
13 years ago
85019887df
add loading of files
13 years ago
3e0e6e35f4
open app thru index.php
13 years ago
30d524b426
load apps before logout so that logout-hook works
13 years ago
f47444e1f7
Use separate function to make absolute urls
13 years ago
a862fec9a3
make remember login token also dependent on password to protect against some brute force attacks on this token
13 years ago
21d613cbc6
Added export.php for contacts app. Works the same way as the one in the calendar app, except there is no UI for it.
...
Fixed indentation in /index.php
14 years ago
b0127e3918
use OC_Log instead of error_log
14 years ago
2cc5f5e19e
made work with http authentication kind of sso login
14 years ago
e710bcb6d3
add owncloud autosetup option
14 years ago
4bcb6f5346
remeber cookie bug fixed
14 years ago
33f24a42b8
redirect url fixed
14 years ago
6d8985ceb2
added infield labels. readded fade in of login button. updated label on install page.
14 years ago
481a37fcf3
Show database only in advanced
14 years ago
c943f48547
fixed link to password recovery. removed duplicated and unused code out of index.php.
14 years ago
ccfa2dd24c
Error when only oc_remember_login cookie set fixed.
...
Filled username field when oc_username is set repaired.
Problems with "advanced settings" button in installation wizard fixed.
CSS improved - login and installation now looks more clean.
Request password link removed (email feature not implemented yet).
Database radio button bugs removed.
It is possible to have an empty database password, now ownCloud will support this "security issue".
Ignore Mac OS X ".DSstore" files.
Fade in/out of login button and remember checkbox removed due to some display errors.
14 years ago
bf3248bee9
remove warning by check cookie before accessing it.
14 years ago
950d4e1da4
Move lostpassword code to own app
14 years ago
aae6881494
Move display of login page to function in OC_Util
14 years ago
Thomas Müller